Facebook Auto Post
Automatically share every new topic to your Facebook Page. When a member publishes a topic, Convoro posts a link to your Page via the Graph API — with a customizable message, optio...
Automatically share every new topic to your Facebook Page. When a member publishes a topic, Convoro posts a link to your Page via the Graph API — with a customizable message, optional excerpt, and per-category control. Dependency-free (uses Laravel's HTTP client only). Configure your Page ID and Page Access Token from the admin settings page.
AI security review
✓
Reviewed safe · 94/100
A straightforward Facebook Page auto-posting extension that uses Laravel's HTTP client to call the official Graph API. Admin routes are properly guarded, inputs are validated, SQL uses the query builder, and credentials are stored in settings (not hardcoded). No RCE, SSRF, exfiltration, or obfuscation found.
- low · Topic content sent to Facebook — PostToFacebookJob and sendTest post topic titles, excerpts, and links to graph.facebook.com using the admin-configured Page Access Token. This is the extension's stated purpose and is gated by an admin-enabled toggle, but operators should be aware content is transmitted to a third party.
- low · Access token stored/rendered in plaintext — In Extension::adminPage() the Page Access Token is rendered into the settings HTML input value (htmlspecialchars-escaped). Stored via Settings; visible to any admin with access to the settings page. Acceptable for the use case but the token is held in plaintext.
Automated review of v1.0.0 by claude-opus-4-8 1 week ago. This is an automated signal to aid your judgment — not a guarantee.